Skip to content

Latest commit

 

History

History
18 lines (15 loc) · 1.17 KB

revoker.md

File metadata and controls

18 lines (15 loc) · 1.17 KB

CHERIoT hardware revocation engine

This block is integrated from the CHERIoT Safe repository. It controls the hardware revoker inside CHERIoT Ibex which is the thing that does the revocation, it is looking for capabilities to freed memory. When a piece of memory is freed its revocation bits are set. The hardware revoker sweeps from the start until the end address for capabilities that point to any revoked region. For more information on how this works please refer to Section 3.3.3 (background pipelined revoker) of this paper.

These are the register offsets:

Offset Register
0x0000 Start address to begin sweeping.
0x0004 End address to stop sweeping.
0x0008 Writing any value to this register sets the hardware revoker to run. When read, the most significant byte is set to constant 0x55.
0x000C Epoch, where the last bit means a sweep is currently happening.
0x0010 Used to read interrupt status and clear it.
0x0014 Enable bit for raising an interrupt when sweeping is done.